PT-2025-30310 · Drupal · Drupal Block Attributes

Greg Knaddison + 4 · Publicado 2025-07-21 · Atualizado 2025-08-26 · CVE-2025-7715

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Drupal Block Attributes versions 0.0.0 through 1.0.9 Drupal Block Attributes versions 2.0.0 through 2.0.0

Description A flaw exists in Drupal Block Attributes that allows for Cross-Site Scripting (XSS). This issue is due to improper neutralization of input during web page generation.

Recommendations Update Drupal Block Attributes to version 1.1.0 or later. Update Drupal Block Attributes to version 2.0.1 or later.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2025-7715

DRUPAL-CONTRIB-2025-090

Produtos afetados

Drupal Block Attributes

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-7715 · Nota de Segurança
• https://twitter.com/CVEnew/status/1947339043185820009 · Publicação no Twitter
• https://t.me/cveNotify/133588 · Publicação no Telegram
• https://twitter.com/VulmonFeeds/status/1947397213463740885 · Publicação no Twitter
• https://drupal.org/sa-contrib-2025-090 · Nota
• https://osv.dev/vulnerability/CVE-2025-7715 · Aviso do Fabricante